Imagine this: Your controller gets an email from your bank with a question about a recent transaction the bank thinks may be suspicious. He clicks on the link and enters the account information but gets a blank page. The next …